Cybersecurity Manager

Overview

Cordoba is a leading engineering and program management firm based in California. We are seeking a Cybersecurity Manager. The Cybersecurity Manager manages the organization's cybersecurity program to protect information systems, technology assets, and sensitive data from evolving threats. This position oversees cybersecurity operations, risk management, incident response, compliance activities, security technologies, and user awareness initiatives. The role supervises cybersecurity personnel, collaborates with internal stakeholders, and assists the Director of Information Security, Systems, and Technology with procurement oversight, vendor management, and strategic initiatives.

The Cybersecurity Manager evaluates emerging risks, implements effective security controls, and ensures alignment with regulatory requirements, industry best practices, and organizational objectives.

• Supervise the cybersecurity team, inclusive of, but not limited to, annual performance evaluation, daily supervision, retention and career planning, and timesheet and expense reimbursement oversight.
• Assist the Director of Information Security, Systems, and Technology in the supervision of the procurement team inclusive of, but not limited to, annual performance evaluation, daily supervision, retention and career planning, and timesheet and expense reimbursement oversight.
• Stay current on developments in cybersecurity, governance, cybersecurity frameworks, and any regulatory and contractual requirements.
• Evaluate the security risks associated with new tools and technologies that Cordoba and projects decide to use.
• Monitor and analyze network traffic and security logs to detect potential threats and vulnerabilities.
• Develop and implement strategies to protect the organization's information systems and information technology.
• Manage vulnerability assessments and penetration testing to identify weaknesses and vulnerabilities in the organization's systems and networks and manage the remediation process.
• Develop, maintain, and manage business continuity disaster recovery and incident response plans and procedures to effectively respond to cybersecurity incidents.
• Develop, deploy, and manage internal phishing campaigns and results. Track and enroll in cybersecurity awareness retraining and lead live webinars on best practices against phishing. Produce reports for management.
• Administer over cybersecurity technology stack. This includes, but is not limited to: endpoint protection platform, antivirus, email security (gateway, API-based, and cloud), unified endpoint management platform (mobile device management)
• Create reports and alerts in cybersecurity technology stack to include, but not limited to, endpoint protection platform, antivirus, email security (gateway, API-based, and cloud), unified endpoint management platform (mobile device management)
• Recommend changes or additions to the cybersecurity technology stack, assess vendors, negotiate contracts and lead the implementation of migration to new systems
• Collaborate with other teams to ensure that cybersecurity protocols are integrated into all aspects of the organization's operations.
• Stay current with the latest cybersecurity threats and trends and ensure that the organization's security measures are always current and effective.
• Provide training and education to staff on cybersecurity best practices.
• Administer identity access management (IAM) and identity provider (IdP) platform, including security groups, membership, and app integration through SAML and SWA.
• Provide helpdesk and technical support to internal and external clients/users, promptly troubleshooting computer hardware and software issues.
• Identify, elevate, and resolve complex or escalated technical issues, recommending improvements as needed.
• Document and track issues and resolutions to maintain accurate support records.
• Produce support documentation for supported products, to include, but not limited to identifying and documenting security controls, compliance, risk management, etc.
• Drive results and set priorities appropriately and independently with limited supervision and direction.
• Identify, evaluate, promote, and help implement customer support best practices.
• Assist the Director of Security, Information Systems, and Technology with vendor management and oversight.
• Effectively contribute to overall Information Security, Systems and Technology strategy.
• Meet financial requirements by submitting information for budgets; monitoring expenses.
• Implement and enforce information technology security policies and procedures.
• Manage security audits as required by information security policies and procedures.
• Recommend Cybersecurity policy and procedure additions, changes and updates as needed.
• Manage and coordinate projects, tasks and information exchange with end users, vendors and consultants as needed.
• Provide on-call and on-site IT and cybersecurity support.
• Provide support to the Director of Information Security, Systems and…